Re: [gentoo-user] Rootkit?

2011-10-06 Thread Michael Mol
On Thu, Oct 6, 2011 at 11:01 AM, Nilesh Govindarajan cont...@nileshgr.com wrote: One of the servers I manage has a strange problem. Every 24h, someone starts a process shows up as perl in the list, but launching command is /usr/sbin/httpd. It shows just one process, but when I run something

Re: [gentoo-user] Rootkit?

2011-10-06 Thread Michael Mol
On Thu, Oct 6, 2011 at 11:10 AM, Michael Mol mike...@gmail.com wrote: On Thu, Oct 6, 2011 at 11:01 AM, Nilesh Govindarajan cont...@nileshgr.com wrote: One of the servers I manage has a strange problem. Every 24h, someone starts a process shows up as perl in the list, but launching command is

Re: [gentoo-user] Rootkit?

2011-10-06 Thread Paul Hartman
On Thu, Oct 6, 2011 at 10:01 AM, Nilesh Govindarajan cont...@nileshgr.com wrote: /usr/sbin/httpd I think this is what apache version 1 used. Did the server upgrade from apache1 to apache2 at some point? Maybe there's some leftover things from the old days that is for apache1.

Re: [gentoo-user] Rootkit Hunter release 1.3.2

2008-04-26 Thread Florian Philipp
On Sat, 2008-04-26 at 14:38 -0400, 7v5w7go9ub0o wrote: (Portage is a little dated at 1.2.9) http://sourceforge.net/projects/rkhunter/ Thanks for the info but this doesn't belong here. The proper thing to do would be to open a bug on http://bugs.gentoo.org and request a version bump.